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ABSTRACT 


This study is confined to a subproblem of a major problem. The 
major problem is viewed as that of selecting a particular design from 
several proposed design concepts. The subproblem treated here is 
that of estimating the reliability of the proposed concepts, with particular 
emphasis on complex systems. 

In the area of complex systems, two methods are presented, and 
the conditions under which these methods can be used are discussed. 


NASA - GEORGE C. MARSHALL SPACE FLIGHT CENTER 


NASA - GEORGE C. MARSHALL SPACE FLIGHT CENTER 
TECHNICAL MEMORANDUM TM X-53592 


ESTIMATING RELIABILITY OF COMPLEX SYSTEMS 

By 

Robert H. Ailor 


RELIABILITY ENGINEERING BRANCH 
RELIABILITY ASSURANCE DIVISION 
QUALITY AND RELIABILITY ASSURANCE LABORATORY 


TABLE OF CONTENTS 


Chapter Page 

I. SELECTION OF A SYSTEM DESIGN 2 

Introduction 2 

Purpose of the Study 4 

Procedure 4 

II. ANALYSIS OF SIMPLE SYSTEMS 6 

Simple Systems Defined 6 

Construction of a Reliability Logic Diagram .... 7 

Writing the System Reliability Equation 8 

Numerical Evaluation ....... 13 

III. ANALYSIS OF COMPLEX SYSTEMS 15 

Complex Systems Defined 15 

Construction of a Reliability Logic Diagram for a 

Complex System 17 

Writing the System Reliability Equation 21 

Numerical Evaluation . * 28 

IV. COMPONENT RELIABILITIES 37 

Component Reliability Functions ...» 37 

The Normal Function 39 

The Binomial Function 42 

The Exponential Function 44 

The Weibull Function 47 

Selection of a Function 48 

Component Reliabilities for the Electrical 

Power System 55 

V. FURTHER ANALYSIS OF COMPLEX SYSTEMS .... 57 

Introduction 57 

A Method for Determining the System Reliability 

Equation 57 

Application of the Method to the Electrical Power 
System 60 


TABLE OF CONTENTS (Continued) 


Chapter Page 

VI. IMPLEMENTING, CONTROLLING, AND TESTING 

THE SOLUTION 64 

Implementation and Controls for the Solution .... 64 

Testing the Solution 65 

VII. CONCLUSIONS AND RECOMMENDATIONS 66 

Conclusions 66 

Recommendations 67 

BIBLIOGRAPHY 69 



LIST OF ILLUSTRATIONS 


Figure Page 

1. Reliability Logic Diagrams. A; Series Arrangement, 

B: Parallel Arrangement 10 

2. Reliability Logic Diagrams. A: Series -Parallel 

Arrangement, B: Semi-Parallel Arrangement .... 12 

3. Electrical Power System (With Optional APU) 16 

4. Reliability Logic Diagram for Electrical Power 

System 19 

5. Reliability Logic Diagram for a System of a Complex 

Nature 24 

6. Simplified Reliability Logic Diagram for Electrical 

Power System 29 

LIST OF TABLES 

Table 

I. Determination of Data for Applying Chi-Square Test . . 52 

II. Data for Applying Chi-Square Test 54 

III. Component Data for Electrical Power System 56 


v 


TECHNICAL MEMORANDUM TM X-53592 


ESTIMATING RELIABILITY OF COMPLEX SYSTEMS 

By 

Robert H. Ailor 


SUMMARY 


This study is confined to a subproblem of a major problem. The 
major problem is viewed as that of selecting a particular design from 
several proposed design concepts. The subproblem treated here is that 
of estimating the reliability of the proposed concepts, with particular 
emphasis on complex systems. 

The analysis of simple systems is discussed whereby the system 
reliability equation can be determined by a relatively easy application 
of the. fundamental probability theorems. For complex systems, two 
methods are presented. First, a canonical expansion scheme technique 
is used when the system has a relatively few number of components or 
the component probabilities of failure are small. If the number of 
components in a system is rather large and the above conditions do not 
hold, another method is presented to obtain the complete system reli- 
ability equation which depends primarily on defining pertinent output 
events for the system. 

The reliability functions for the components that make up a system 
are discussed and finally, a limited discussion is provided on imple- 
menting, controlling, and testing the solution in regard to reliability. 


CHAPTER I. SELECTION OF A SYSTEM DESIGN 


Introduction 

The selection of a system design can be treated as an engineering 
management type problem. A situation may exist whereby the engineering 
manager is confronted with the problem of selecting a particular design from 
several proposed design concepts. 

The nature of the technical decision process is basically the same as 
any other since it requires recognition of objectives, formulation of criteria 
for the system to meet these objectives, and selection of rules or strategies 
for making the choice that will hopefully maximize a payoff. 1 Criteria for the 
selection of a design concept from several competing ones might be based on 
such elements as cost, weight, performance, and reliability. 

Thus the major problem is somehow to select one concept out of several 
based on established criteria. There are methods available to determine how 
well objectives have been met based on established criteria. This problem can 
become difficult when two or more quantitative objectives are involved. A 
measure of efficiency is required for each objective, and a method is required 


*J.M. English, "Understanding the Engineering Design Process ," 
Journ a l of Industrial Engineering , Volume XV, Number 6, 1964, p. 291. 
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for transforming units on each efficiency scale into one standard scale with a 
relative value of points on this scale. 2 

In many situations, a limitation of resources precludes the necessary 
effort to make the required transformations. In such cases a common proce- 
dure is to select one of the most important objectives as a basis for measuring 
the performance of each course of action. Minimum levels of performance for 
the other elements are imposed as restrictions for an acceptable solution. 3 

Determining the value of each of the elements on which the criteria is 
based presents subproblems of the major problem. Estimating the reliability 
of each design concept is such a subproblem , the objective of which is to 
maximize the reliability, which is also the associated measure of efficiency. 
Several different system design concepts, each representing a course of action, 
may be under consideration. Many such systems are of a complex nature. The 
reliability of each system concept is estimated, and the one having the highest 
value is presented as the best candidate from the standpoint of reliability. For 
the purposes of this study, reliability may be defined as the probability that 
some desired event will occur. 


2 R. L. Ackoff, Scientific Method , John Wiley & Sons, Inc. , 
New York, N. Y., 1962, p. 77. 

^bid. , p. 105. 
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Purpose of the Study 


The objective of this study is to develop a method for estimating the 
reliability of complex systems. The term complex system is used to indicate 
a functional system of such a nature that the reliability of it cannot easily be 
estimated by application of the fundamental probability theorems. A complex 
system as defined here can also be thought of as composed of a number of 
components such that when a reliability logic diagram is constructed for the 
purposes of making a probability analysis, the diagram does not result in a 
series, parallel, or series-parallel arrangement of the components. The 
reliability logic diagrams will be discussed further in Chapter II. 

Procedure 

Analysis of simple systems will be discussed first. This will consist 
of constructing a reliability logic diagram and applying the basic probability 
theorems to obtain an equation which expresses the reliability of the system 
as a function of the reliabilities of the components which make up the system. 

A complex system will then be discussed using an electrical power 
distribution system as an example. A system functional block diagram will 
be used to construct a reliability logic diagram, and a method for estimating 
the reliability under certain conditions will be presented. At this point the 
reliabilities of the components that make up the system will be discussed. 
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Another method for estimating the reliability of a complex system will 
then be developed. Following this will be a limited discussion on implementing, 
controlling, and testing the solution. Finally, a summary and recommendations 
will be presented. 
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CHAPTER II. ANALYSIS OF SIMPLE SYSTEMS 


Simple Systems Defined 

When a system is studied for the purpose of making a reliability 
analysis, a reliability logic diagram is constructed to depict the system. A 
reliability logic diagram is not a functional schematic of the system. It is 
instead a diagram showing the reliability relationship of the components that 
make up the system. 

Simple systems are characterized by two basic types of relationships: 
series and parallel. Components are in series when the failure of any one of 
them would mean a failure of the system. Components are in parallel when 
successful operation of at least one of them would not cause failure of the 
system. Simple systems can also be formed by combinations of these two 
relationships which provide series-parallel systems. There are also semi- 
parallel situations in which, for example, two out of three components 
operating successfully would ensure successful operation of a system or a 
segment of a system. 

It is cautioned that these systems are not necessarily simple from a 
functional standpoint, but simple from a reliability logic standpoint. A 
system may be highly complicated from a functional standpoint, but it may be 
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necessary for every component in the system to work properly in order for 
the system to work properly. Thus such a system would be a simple series 
system. 

Construction of a Reliability Logic Diagram 

To construct a reliability logic diagram of a system, it is necessary to 
determine the effect of the failure of the components that make up the system. 
This is quite often difficult to do and is best done by the design personnel who 
are responsible for the system and are most familiar with it. Many times it 
is performed by people in a reliability group. When this situation arises, it 
is necessary for the reliability engineer to work very closely with the appro- 
priate design engineer in order to construct the reliability logic diagram. 

After the reliability logic diagram is constructed, the system reliability 
is determined as a function of the reliabilities of the components that make up 
the system. 

This can be accomplished for simple systems by application of the 
fundamental probability theorems given below. 

The Addition Theorem . If C t and C 2 are two events which can occur 
simultaneously, the probability that either Cj or C 2 or both Cj and C 2 will 
occur is 

P(Cj + C 2 ) = P(Ci) + P(C 2 ) - P(CiC 2 ) , 
where PIC^ + C 2 ) = probability that either Cj or C 2 or both C t and C 2 will 
occur, 
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PfCj) = probability that Cj occurs, 

P(C 2 ) = probability that C 2 occurs, and 
P(C 1 C 2 ) = probability that both Cj and C 2 occur. 

If the two events are mutually exclusive so that if one occurs the other cannot, 
the probability that either C* or C 2 occurs is 

P(Cj + C 2 ) = P(Cj) + P(C 2 ). 

The Multiplication Theorem . If C t and C 2 are two events, the probability 
that both occur is 

P(Cfi) =P(C 1 )P(C 2 |C 1 ), 

where P(C 2 |C 1 ) = probability that C 2 occurs, given that Cj has occurred. 

If Cj and C 2 are two independent events such that the occurrence of 
either is not dependent on the other, then the probability that both occur is 

P(CiC 2 ) - P(C 1 )P(C 2 ). 1 

Writing the System Reliability Equation 

To illustrate how the system reliability equation is written for simple 
systems, several hypothetical systems will be postulated. First, a series 
system will be used. Suppose a system containing three components has been 
studied, and it has been determined that every component in it has to operate 
in order for the system to operate. A reliability logic diagram for such a 


*P. G. Hoel, Introduction to Mathematical Statistics , John Wiley & Sons, 
Inc., New York, N. Y. , 1962, pp. 9-11. 
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system is shown in Figure 1-A. Assuming the successful operation of each 

component is an independent event, the system reliability equation is written as 

R = Rj • R 2 - Rj, 

s 

where R = reliability (probability of success) of the system, 
s 

R. = reliability of the i^ 1 component, and i = 1,2,3. 

Now consider a system which, after study, results in a parallel 
reliability logic diagram. It consists of two components, and the successful 
operation of either component will provide successful system operation. The 
diagram is shown in Figure 1-B. Assuming again that the successful operations 
of the components are independent events, the system reliability equation is 
written as 


R — Rj + R 2 - RjR 2 , 

where R g = reliability of the system, and 

th 

Rj = reliability of the i component for 

i = 1,2. 


Now since each component operates either successfully or not, the 
relationship 


R t + Q. = 1 


th 


is valid where R. = the reliability (probability of success) of the i component 

th 

and Q. = the unreliability (probability of failure) of the i component. With 
this relationship the system reliability equation can also be written as 
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B. Parallel Arrangement 


Figure 1. Reliability Logic Diagrams. A: Series Arrangement, 
B: Parallel Arrangement. • 
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R - 1 ■ Q1Q2' 

0 

This can be verified as follows: 

Qj = 1 - R. t thus 
Ql = 1 - R t , and 

Q 2 = 1 - R 2 ; substituting into the system reliability equation, 

R s = 1 - ( 1 - Rj) ( 1 - R 2 ) = i - ( 1 - R 2 - Rj + RjRj) 

R g = Rj + R 2 - RjR 2 . 

This is the same equation obtained previously. 

Consider now a system consisting of four components. Assume the 

system has been studied and that it is concluded that two of the components are 

redundant (parallel) , and that the other two are in series. This results in a 

series -parallel reliability logic diagram shown in Figure 2-A. If independent 

probabilities of success for the components are assumed, the system reliability 

equation is written directly as 

R = Ri ( R 2 + R 3 - R 2 R 3 ) R4> 
s 

where R = reliability of the system , and 
s 

th 

R. = r eliability of th e i component for 

i = 1,2,3, 4. 

For a semi-parallel system, assume that a system of three identical 
components has been studied and it has been determined that the system will 
operate successfully if at least two out of three components operate successfully. 
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A. Series- parallel Arrangement 



At least two out of 
three must operate 


B. Semi - para 1 1 el Arrangement 


Figure 2. Reliability Logic Diagrams. A: Series-parallel 
Arrangement, B: Semi-parallel Arrangement. 
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The system reliability equation can be written by application of the binomial 


expansion which is written in compact form as 

n 


z _* 




For this particular problem, 


n = 3, 


R = probability of success for each component, and 
Q = probability of failure for each component. 

Expansion of the compact form gives 

3 

Z Jh ~ v T, r3 ~ XqX = R 3 + 3R 2 Q + 3RQ 2 + Q 3 . 

x ^o x ' (3 “ x) - 

The first two terms of this expansion represent events for which success will 

be achieved. Thus the system reliability equation is 

R = R 3 + 3R 2 Q. 
s 

The reliability logic diagram for this system is shown in Figure 2-B. 


Numerical Evaluation 

The system reliability is evaluated numerically by direct substitution 
of the component reliabilities into the system reliability equations. For 
convenience of illustration, assume that all the components have a reliability 
of 0. 9900, and thus an unreliability of 0. 0100. 


2 P. G. Hosl, Introduction to Mathematical Statistics, John Wiley & Sons, 

Inc. , New York, N. Y. , 1962, p. 86. 
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For the series system, the system equation was 

R = (Rj) (R 2 ) (R 3 ). 
s 

By direct substitution, 

R =(0.9900) (0.9900) (0.9900) 
s 

R = 0. 9703- 
s 

For the parallel system, the system reliability equation was 
R = Rj + R 2 — Rj- R 2 . 

By direct substitution, 

R = 0. 9900 + 0. 9900 - (0. 9900) ( 0. 9900) 
s 

R = 0. 9999. 
s 

In the series-parallel system, the system reliability equation was 

R = (Rj) (R 2 + R 3 - R 2 -R 3 ) (R 4 ). 
s 

By direct substitution, 

R g = (0.9900) [0. 9900 + 0. 9900 - (0. 9900) (0. 9900)] (0.9900) 

R = 0. 9800. 
s 

Lastly, the semi-parallel system produced the system reliability 
equation, 

R = R 3 + (3) (R 2 ) (Q). 
s 

By direct substitution, 

R = (0. 9900) 3 + 3(0. 9900) 2 (0. 0100) 
s 

R = 0. 9997. 
s 
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CHAPTER m. ANALYSIS OF COMPLEX SYSTEMS 


Complex Systems Defined 

As discussed in Chapter I, the term complex system is used here to 
indicate a functional system composed of a number of components such that 
when a reliability logic diagram is constructed for the purpose of making a 
probability analysis, the diagram does not result in a series, parallel, or 
series-parallel configuration. Thus the system reliability equation of the 
complex system cannot readily be written by direct application of the funda- 
mental probability theorems. 

The analysis of complex systems will be discussed, with an electrical 
power distribution system as an example. This electrical power distribution 
system, shown in Figure 3, is typical of those used in a twin-engine transport 
or passenger airplane. This might be one of several proposed systems being 
considered. 

For each proposed system, it is usually desirable that comparison be 
made on the basis of the probability of achieving several desired events. Some 
of these events would be: 

1. Having power available during flight to at least one AC 
bus and at least one DC bus, 

2. Having power available during flight to the emergency 
AC bus and the emergency DC bus , and 
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Figure 3. Electrical Power System ( With Optional APU) 






















3. Having the capability to dispatch under Federal 
Aviation Agency (FA A) regulations. 

Construction of a Reliability Logic Diagram for a Complex System 

The construction of a reliability logic diagram for a complex system is 
performed in the same general manner as for a simple system; however, it 
is much more difficult. Initially, the event which is of concern must be 
defined. The immediate objective here is to estimate the probability that 
this event will occur (or the probability that it will not occur). As discussed 
in Chapter II, it is necessary to determine the effect of the failure of the 
components that make up the system. This requires a thorough understanding 
of how the system operates. Thus, for expediency, the assistance of one of 
the system design engineers must be readily available. 

No attempt will be made here to give a description of how the electrical 
power distribution system operates as that is not the primary purpose of this 
study. However, it is necessary to point out at least one major feature of the 
system operation. The various buses have the electrical loads divided among 
them in such a manner that the complete loss of one AC bus and one DC bus 
will not adversely affect the operation of the airplane. 1 

Subsequently, to develop the method of analysis, the reliability logic 
diagram will be constructed with the objective of estimating the probability 


*0^9 Electrical System Fault Analysis, Engineering Report No. 
LB-32161, Douglas Aircraft Co. , Long Beach, California, April, 1965, 
p. 3. 11. 


17 




of occurrence of the following event: having power available during flight to 
at least one AC bus and at least one DC bus. This will also be referred to as 
the reliability of the system. In other words, system reliability is equal to 
the probability of having power available during flight to at least one AC bus 
and at least one DC bus. 

The reliability logic diagram is shown in Figure 4. This diagram is 
constructed from studying the system functional block diagram shown in 
Figure 3, and by drawing, if necessary, on the knowledge of the appropriate 
design engineer. The diagram reveals that there are several possible paths 
for making power available to the left and right AC buses and the left and 
right DC buses. To avoid overcomplicating the analysis, the study will be 
made assuming a system without the optional auxiliary power unit (APU). 

Also independent probabilities of success for the components will be assumed. 
If sufficient information was available and it was determined that some of the 
probabilities were dependent, then the dependent probabilities would be used. 
It is also assumed that mechanical power is available to drive the generators. 

Although it is difficult to provide specific rules for constructing a reli- 
ability logic diagram such as Figure 4 from an operational or functional block 
diagram such as Figure 3, it is worthwhile to discuss the approach for doing 
so. As mentioned previously, the operational diagram in Figure 3 reveals 
that there are several possible paths for making power available to the left 
and right AC buses and the left and right DC buses. 
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The paths can be traced from left to right by beginning with the source 
(generators) and ending with the output components (AC and DC buses). 

While proceeding to trace the paths, blocks are drawn to indicate the compo- 
nents which the logic paths connect, and the components are identified in the 
blocks. It is also possible to trace the paths from right to left, or from the 
AC and DC buses to the generators. Actually, it may be desirable to trace the 
paths in both directions to provide a self-checking method. 

As an example, consider tracing the paths for making power available to 
the AC buses. Starting from left to right a block can be constructed in the 
upper left hand corner to represent the right generator. A path is then drawn 
from this block to another block which represents the right generator relay. 
This path is then continued to a block representing the right generator bus 
and from there to a block representing the right AC bus. A path for the left 
hand portion is constructed in a similar manner. A block is constructed in the 
lower left hand corner to represent the left generator, and the path is continued 
from left to right, terminating with a block representing the left AC bus. 

After the right and left hand portions are completed, further examination 
of the diagram reveals a cross-over path to the right of the generator relays 
and to the left of the generator buses. A block is constructed in the appro- 
priate area which represents the AC cross tie relay. Paths are then 
constructed to connect this block to the left and right hand paths. This 
completes construction of the reliability logic diagram for the AC portion. 
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The DC portion is constructed in a similar manner. After the diagram is 
completed, discussions are held with the system designer to determine the 
validity of the paths. 

Writing the System Reliability Equation 

Before proceeding with the analysis of the electrical power distribution 

system, the method to be used will first be demonstrated on two hypothetical 

systems. This should make it easier to understand its application later. First 

consider the simple, two-component system shown in Figure 1-B, Chapter II. 

The reliability logic diagram of this system depicted a parallel arrangement 

of component 1 and component 2. As discussed in Chapter II, each component 

operates successfully or not, and the relationship 

R. + Q. = 1 
i l 

is valid where 

R. = the reliability (probability of success) of the i component and 
= the unreliability (probability of failure) of the i^ 1 component. 

Using this relationship, 

Rl + Qi = 1 and 
R2 + Q2 = 1 

Taking the product of these two equations gives 
(Ri + Qi) (R 2 + Q 2 ) = (1) (i) = i- 
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Expanding the left side of the above equation will produce all possible 
events for the system. The expansion is 
RiR2 + RjQ 2 + QiR 2 + Q1Q2 = 

Since the system will work properly if either component 1 or component 2 

or both work properly, examination of the left side of the equation reveals 

that the first three terms represent events for which successful system 

operation will be achieved. Therefore the system reliability (R ) as a 

s 

function of the component reliabilities and unreliabilities is 

R g = r i r 2 + r iQ 2 + Ql R 2* 

Substituting (1 - R 2 ) for Q 2 and (1 - Rj) for Q lt the system reliability 
can be expressed as a function of the component reliabilities. Substituting, 

R g = RiR 2 + R^ 1 - R 2 ) + < 1 - Ri)R 2 
R g = Rj + R 2 - RjR 2 . 

This is the same equation that was obtained in Chapter II by direct application 
of the addition theorem. 

The system reliability equation can also be determined from the 
canonical form presented below. This is merely a scheme to write out all the 
possible events and show their significance as to success or failure of the 
system. 

The procedure of the technique is first to write down the term which 
represents success of all the components. Next, the terms are written down 
which represent the failure of a single component. Then the terms are written 
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down to represent the failure of two components. The process is continued 
until all possible events are represented. The system reliability equation is 
then written by summing those terms that represent events which result in 
system success. 

EVENT SYSTEM CONDITION 

RiR^ = Success 

R1Q2 = Success 

QjR 2 = Success 

QiQ 2 = Failure 

Summing the success terms produces the system reliability equation 

R — RjR 2 + RjQ 2 + QjR 2 . 
s 

This is the same equation obtained previously. 

Now consider a system composed of five components. After being 
studied, a reliability logic diagram is constructed of the system as shown in 
Figure 5. This is of a more complex nature than the previous one. System 
success is achieved if there is an output from component 4, or component 5, 
or both. The system reliability equation is determined by expressing the 
system events in canonical form, and summing those which represent success. 


EVENT 


SYSTEM CONDITION 

R 1 R 2 R 3 R 4 R 5 

= 

Success 

R1R2R3R4Q5 

= 

Success 

R 1 R 2 R 3Q4 R 5 

= 

Success 
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EVENT 


SYSTEM CONDITION 

RlRjQ 3 R 4 R 5 

= 

Success 

R1Q2R3R4R5 

= 

Success 

Q1R2R3R4R5 

= 

Success 

R1R2R3Q4Q5 

= 

Failure 

R1R2Q3R4Q5 

= 

Success 

R1Q2R3R4Q5 

= 

Success 

Q1R2R3R4Q5 

= 

Success 

R1R2Q3Q4R5 

= 

Success 

R1Q2R3Q4R5 


Success 

Q1R2R3Q4R5 

= 

Success 

R1Q2Q3R4R5 

= 

Success 

Q4R2Q3R4R5 

= 

Success 

Q1Q2R3R4R5 

= 

Failure 

R1R2Q3Q4Q5 

= 

Failure 

R1Q2R3Q4Q5 

= 

Failure 

Q1R2R3Q4Q5 

= 

Failure 

R1Q2Q3R4Q5 

- 

Success 

Q1R2Q3R4Q5 

= 

Failure 
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EVENT 


SYSTEM CONDITION 

Q1Q2R3R4Q5 

= 

Failure 

RlQ 2 Q 3 Q 4^5 

= 

Failure 

QiR 2 Q 3 Q 4 R 5 

= 

Success 

QlQ 2 ^ 3 Q 4^5 

= 

Failure 

Q lQ 2 Q 3 ^ 4^5 

= 

Failure 

R1Q2Q3Q4Q5 

= 

Failure 

QlR 2 Q 3 Q 4 Q 5 

= 

Failure 

QAR3Q4Q5 

= 

Failure 

QiQ 2 Q 3 R 4 Q 5 

= 

Failure 

QiQ 2 Q 3 Q 4 R 5 

= 

Failure 

QlQ 2 Q 3 Q 4 Q 5 

= 

Failure 


The system reliability equation can now be determined by summing the 

terms for those events which represent successful system condition. 

R = R1R2R3R4R5 + R1R2R3R4Q5 

s 

+ R1R2R3Q4R5 + R1R2Q3R4R5 
+ R1Q2R3R4R5 + Q1R2R3R4R5 
+ R1R2Q3R4Q5 + R1Q2R3R4Q5 
+ Q 1R2R3R4Q 5 + R1R2Q3Q4R5 
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+ RJQ 2 R 3 Q 4 R 5 + Q 1^2^34® 5 
+ R1Q2Q3R4R5 + Ql^ 2 Q 3 -^ 4^5 

+ R1Q2Q3R4Q5 + Ql^QsQi^S 

By substituting ( 1 -R.) for Q. , the system reliability equation can be simplified. 
After some tedious reduction processes, the equation becomes 

R = R t R 4 + R2R5 + R1R3R5 + R2R3R4 
s 

- R 1 R 2 R 3 R 4 - R1R2R3R5 - R1R2R4R5 

- R1R3R4R5 - R2R3R4R5 + 2R4R2R3R4R5. 

It will be seen later in the section on numerical evaluation that this 
reduction is not necessary to obtain a numerical answer. 

With the knowledge gained from the analysis of the relatively simple 
complex system, it will now be easier to understand the analysis of the 
electrical power distribution system. Reference to the reliability logic 
diagram of the system in Figure 4 indicates that certain portions of the diagram 
can be reduced by the techniques used on simple systems. For example, the 
generator and the generator relay can be combined in series for both the left 
and right portions of the system. In other words, they can be combined by the 
application of the multiplication theorem. 

In the right hand portion, the AC ground service tie relay, the ground 
AC bus, the right transformer rectifier (T-R) No. 2 , the reverse current 
relay, and the DC ground service tie relay can also be combined in series into 
a single component. The right T-R No. 1 and the reverse current relay can 
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be combined in series into a single component. After this reduction, the 
latter is seen to be in parallel with the former, and they can be reduced to 
a single component by applying the addition theorem. A similar reduction 
can be made in the left hand portion of the system. 

After the techniques used on simple systems have been applied as exten- 
sively as possible, a simplified reliability logic diagram can be constructed 
as shown in Figure 6. Examination of this diagram reveals that the desired 
event discussed previously is achieved if there is an output from component 
8 or 10 or both and from component 11 or 12 or both. The equation for this 
system's reliability can also be determined by expressing the possible system 
events in canonical form, and summing those which represent success. How- 
ever, these processes become prohibitive for a system with this many 
components. When this is the case, and the component probabilities of failure 
are small, it is a good approximation simply to determine the numerical value 
of the first few success terms and sum them to obtain the system reliability 
estimate. In view of this, the construction of the canonical scheme for the 
electrical power system will be delayed until the next section on numerical 
evaluation. 

Numerical Evaluation 

For a complex system, the reliability can be estimated by compiling a 
list of the success terms from the canonical scheme, numerically evaluating 
them, and obtaining the sum of these numerical values. The estimate can also 
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be obtained from the reliability equation after it has been determined by 
simplifying the sum of the success terms. This can be done quite readily for 
the system of five components, but as discussed earlier, obtaining the complete 
expansion for the electrical power system to determine the complete system 
equation is far too cumbersome. If the component probabilities of failure are 
small, a good approximation can be obtained from the first few terms as 
previously discussed. 

Both ways will be illustrated using the hypothetical system shown in 
Figure 5. First consider the method of numerically evaluating the success 
terms as they appear in the canonical scheme. For convenience of illustration, 
assume each component has a reliability of 0. 90000 (hopefully, much higher in 
an actual system) and thus an unreliability of 0. 10000. 


SUCCESS TERM 


NUMERICAL EVALUATION 


= 

0. 59049 

RJR 2 R 3 R 4 Q 5 

= 

0. 06561 

R 1 R 2 R 3 Q 4 R 5 

= 

0. 06561 

RiRaQgRiRg 

= 

0. 06561 

R 1 Q 2 R 3 R 4 R 5 

= 

0. 06561 

Q1R2R3R4R5 

= 

0.06561 

R1R2Q3R4Q5 

= 

0.00729 

R 4 Q 2 R 3 R 4 Q 5 

= 

0.00729 
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SUCCESS TERM 


NUMERICAL EVALUATION 

Q 1 R 2 R 3 R 4 Q 5 

= 

0. 00729 

R 1 R 2 Q 3 Q 4 R 5 

= 

0. 00729 

R1Q2R3Q4R5 

= 

0. 00729 

Q1R2R3Q4R5 

= 

0. 00279 

l 

R1Q2Q3R4R5 

= 

0. 00729 

Q 1 R2Q 3 R 4 R 5 

= 

0. 00729 

R 1 Q 2 Q 3 R 4 Q 5 

= 

0 . 00081 

QiR 2 Q 3 Q 4 R 5 

= 

0. 00081 

R 


0. 97848 

s 




Now consider the method of substituting the component reliabilities 
directly into the reduced system equation. The system equation obtained in the 
previous section is 

R = R1R4 + R2R5 + R1R3R5 + N2N3R4 
s 

- R 1 R 2 R 3 R 4 - R 4 R 2 R 3 R 5 - R 4 R 0 R 4 R 5 

- R 4 R 3 R 4 R 5 - R 2 R 3 R 4 R 5 + 2R 1 R 2 R 3 R 4 R 5 . 

By direct substitution, the reliability estimate is 

R = 0.97848. 
s 

This agrees with the value obtained before. 

Construction of the canonical scheme for the electrical power system has 
been delayed until now. The numerical estimate of the system reliability will 
be included in the scheme. Under the system condition column, S will denote 
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success, and F will denote failure. For convenience of illustration, relia- 
bilities for the components as shown in Figure 6 will be assumed to be 0. 999000. 
Thus the component unreliabilities are 0. 001000 (1 x 10 -3 ). 

From the binomial expansion, the term indicating three failures is 
22QR 9 Q 3 . Since Q - 1 x 10 3 , Q 3 = ( 1 x 10 3 ) 3 — 1 x 10 9 . Now R is less than 
one, so this would represent a sum total of less than 220 x 10 -9 . Since a 
portion of this sum represents failure, terms involving three Q*s would not 
make any significant contribution. Terms involving higher orders of Q would 
decrease correspondingly. Therefore, it is necessary only to list and evaluate 
those success terms involving zero, one, or two Q's. For those terms repre- 
senting failure, the word "none" will appear under the numerical value col um n. 

SYSTEM NUMERICAL 


EVENT 


CONDITION 


VALUE 

R jR 2 R 3 R 4 R 5 RgR 7 R 8 R 9R i qR 4 4 R 12 

= 

S 

= 

0. 98806578 

R 4 R2 R3R4R 5 R 6 R 7 R 8 R 9R ! qR A jQ 12 

= 

S 

=r 

0. 00098905 

R 1^2 ^3^ 4^ sRgR 7 RgR 9R 1 oQ i iR 12 

= 

S 

= 

0. 00098905 

R 1^2 R 3^4^ 5^ 6^ 7^ 8^ 9Q 1 0^ 1 lR 12 

= 

S 

= 

0. 00098905 

R 1R2R3R4R 5RgR 7 R g Q 9R 4 oR 4 4 R 12 

= 

s 

= 

0. 00098905 

R 1R2R3R 4 R 5 R 6 R 7 Q 8 R 9R 1 oR 1 iR 12 

= 

s 


0. 00098905 

R 4 R 2 R3R4R 5R gQ 7 R gR 9R 1 oR 1 iR 12 

= 

s 

=r 

0. 00098905 

R jR 2 R 3 R 4 R 5 Q 6 R 7 R 3 R 9R 1 oR 1 4 R 42 

= 

s 

= 

0. 00098905 

R iR^ R3R4Q 5 R 6 R 7 R gR 9 R 4 qR 4 4R 12 

= 

s. 

= 

0. 00098905 

R !R 2 R 3 Q 4 R 5R gR 7 R 8R9R10R11R12 

= 

s 

= 

0. 00098905 
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EVENT 


SYSTEM 

CONDITION 


NUMERICAL 

VALUE 


R 1 R 2 Q 3 R 4 R 5 R 6 R 7 R 8 R 9 R 1 oR 1 lR 12 

= 

S 


0. 00098905 

R iQ 2 R 3 R 4 R 5 R 6 R 7 -R 8 R 9 R 1 oR 1 iR 12 

= 

s 

= 

0. 00098905 

Q 1 R 2 R 3 R 4 R 5 R 6 R 7 R 8 R 9 R 10 R 11 R 12 

= 

s 

= 

0. 00098905 

In the events that are iterated below, the appropriate R 
space if that space is void of a symbol. 

belongs to a 

R 1 R 2 R 3 R 4 R 5 RgR 7 R gR 9 R 1 oQ 1 iQ 12 

= 

F 


None 

Qio Q 12 

= 

s 

= 

. 00000099 

Q 9 Ql2 

= 

s 


. 00000099 

Qs Ql2 

= 

s 


. 00000099 

Q 7 Ql2 

= 

s 

= 

. 00000099 

Q6 Ql2 

= 

s 

= 

. 00000099 

Q 5 Ql2 

= 

s 

= 

. 00000099 

Q 4 Ql 2 

= 

s 

= 

. 00000099 

Q 3 Ql2 

= 

s 

= 

. 00000099 

Q 2 Ql2 

= 

s 

= 

. 00000099 

Qi Q 12 

= 

s 

= 

. 00000099 

R iR 2 R3R 4 R 5 R 6 R7R 8 R 9 Q 1 oQ 1 iQ 12 

= 

s 

= 

. 00000099 

Q 9 Qii 

= 

s 

= 

. 00000099 

Qs Qil 

= 

s 

= 

. 00000099 

Q 7 Qn 

- 

s 

= 

. 00000099 

Q6 Q 11 

= 

s 

= 

. 00000099 
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EVENT 


SYSTEM 

CONDITION 

S 



NUMERICAL 

VALUE 

. 00000099 

Q 4 Qii 

= 

s 

= 

. 00000099 

Q 3 Q 11 

“ 

s 

= 

. 00000099 

Q 2 Q 11 

= 

s 

= 

. 00000099 

Ql Qn 

= 

s 

= 

. 00000099 

R JR 2 R 3 R 4 R sRgR^RsQ 9 Q 10 R 11 R 12 

= 

s 

= 

. 00000099 

Qs Q 10 

= 

F 

= 

None 

Q 7 Q 10 

= 

s 


. 00000099 

^6 QlO 

= 

s 

= 

. 00000099 

Q 5 Q 10 

= 

s 

= 

. 00000099 

Q 4 Q 10 

= 

F 

= 

None 

Q 3 Q 10 

= 

S 

= 

. 00000099 

Q 2 Q 10 

= 

s 

= 

. 00000099 

Qi Q 10 

= 

s 

= 

. 00000099 

R 1 R 2 R 3 R 4 R 5 R 6 R 7 Q sQ 9^ 1 oR 1 1 ^ 12 

= 

s 

= 

. 00000099 

Q 7 Q 9 

= 

s 

= 

. 00000099 

Q6 Q 9 

= 

s 

= 

. 00000099 

Q 5 Q 9 

= 

s 

= 

. 00000099 

Q 4 Q 9 

= 

s 

= 

. 00000099 

Q 3 Q 9 


s 

= 

. 00000099 
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EVENT 

R 1 Q 2 E 3 R 4 R 5 R 6 R 7 Q gQjRioRnRi 2 

= 

SYSTEM 

CONDITION 

S 


NUMERICAL 

VALUE 

. 00000099 

Qi Q 9 

= 

s 

= 

. 00000099 

R 1 R 2 R 3 R 4 R sReQ 7 Q sR 9 R 1 oR 1 iR 12 

= 

s 

= 

. 00000099 

Q 6 Q 8 

= 

s 

= 

. 00000099 

Q 5 Q 8 

= 

F 

= 

None 

Q 4 Qs 

= 

S 

= 

. 00000099 

Q 3 Qs 

= 

S 

= 

. 00000099 

Q 2 Qs 

= 

S 

= 

. 00000099 

Qi Qs 

= 

S 

= 

. 00000099 

R iR2R 3 R 4 R5Q6Q7R8R9Rl0RilRi2 

= 

F 

= 

None 

Q 5 Q 7 

= 

S 

= 

. 00000099 

Q 4 Q 7 

= 

F 

= 

None 

Q 3 Q 7 

= 

S 

= 

. 00000099 

Q 2 Q 7 

= 

s 

= 

. 00000099 

Qi Q 7 

= 

s 

= 

. 00000099 

R 1 R 2 R 3 R^ 5 Q e R7R8R9RioRiiRi2 

= 

F 


None 

Q 4 Qe 

= 

S 

= 

. 00000099 

Q 3 Q6 

= 

S 

= 

. 00000099 

Q 2 Q6 

= 

S 

= 

. 00000099 

Qi Qe 


S 

= 

. 00000099 
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SYSTEM 


NUMERICAL 

EVENT 


CONDITION 


VALUE 

R 1R2R3Q4Q 5 Re^ 7 ^ 8 ^ 9 ^ 10 ^ 11^12 

= 

F 

= 

None 

Q3 Q5 

= 

S 

= 

. 00000099 

Q2 Q5 

= 

s 

= 

. 00000099 

Qi Qs 

= 

s 

= 

. 00000099 

R 1R2Q3Q 4R 5R6R7R 8R9R10R11R12 

= 

s 

= 

. 00000099 

Q2 Q4 

= 

s 

= 

. 00000099 

Qi Q4 

= 

s 


. 00000099 

R 1Q2Q3R 4R 5R6R7R 8^ 9 ^ 1 0^1 1R12 

= 

s 

= 

. 00000099 

Qi Q3 

= 

s 

= 

. 00000099 

Q 1Q2R3R4R5R6R7R8R9R10R11R12 

= 

F 


None 


Summing these success term evaluations will produce an estimate of the 

system reliability. The value is 

R = 0. 999991. 
s 
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CHAPTER IV. COMPONENT RELIABILITIES 


Component Reliability Functions 

Before proceeding further, the determination of the reliabilities of the 
components that make up a system should be discussed. This will not be an 
all inclusive discussion, as component reliability functions are treated in 
several books such as the one by Lloyd and Lipow. 1 Component reliability 
functions have been derived from the specific applications of functions that 
have existed for many years. 

The reliability function can be computed from the mutually exclusive 
relationship 

R(t) + Q(t) = 1. 

Thus 

R(t) = l - Q(t) , where 

R(t) = reliability of the component as a function of time (or some other 
variable) and one or more parameters, and 

Q(t) = unreliability of the component as a function of time (or some other 
variable) and one or more parameters. 

The component unreliability function can be defined in terms of a failure 
distribution function (cumulative probability) or in terms of a failure frequency 


*D. K. Lloyd and M. Lipow, Reliability: Management, Methods, and 
Mathematics , Prentice-Hall, Inc., Englewood Cliffs, New Jersey, 1962, 
pp. 112-156. 
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function (probability density function). These functions can be discrete or 
continuous. Many of these functions exist, but only a few will be discussed. 
For a continuous function, the unreliability distribution function is 
Q(t) = Pr(T< t) ; 0 < t < °°. 

This equation states that the unreliability, as a function of the variable time, 
is equal to the probability that the time of failure, T, is less than or equal to 
the time, t. In other words, it is the probability that the component has 
failed in the time interval 0 to t. 

If f (t) is the time derivation of Q(t) then 
f(t)dt = Pr(t < T< t + dt). 

In this equation, f(t) is the failure frequency function. The left hand side of 
the equation represents the frequency with which the component, beginning to 
operate at t = 0, will fail in the interval t to t + dt. 

From the proceeding discussions, it can be seen that 
Q(t) = J Q t f(t) dt. 

Using the basic concept of a frequency function, 2 the component reliability 
function is determined to be 

R(t) = i - Q(t) = i - f* f(t)dt, or 
R(t) = / t °° f(t)dt. 

This follows from the relationship 

/ Q t f(t)dt+ J t °°f(t)dt= 1. 


2 P. G. Hoel, Introduction to Mathematical Statistics , John Wiley & Sons, 
New York, N. Y. , 1962, p. 35. 
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For a discrete function, the failure frequency function, f(x) , is a 
function that gives the probability that the random variable x will assume any 
particular value in its range. Thus 

a - 1 

Q(x) = Yj f(x) = Pr( 0^ x sa - 1) , and 
x = 0 


n 

R(x) = Y f(x) > since 
x = a 

a - 1 n 

Y f(x) + y f ^ x ) = 

x = 0 x = a 


The Normal Function 

The normal function is used as an approximating function to compute the 
reliability of a component when the component tends to have wearout charac- 
teristics. The failure frequency function for the normal function is 


f(t) = 



- (t - M) 2 

2 ? 


where 


(Tsfiiic 

t = the age of the component, 

M = the mean wearout life, and 

cr = the standard deviation of the lifetimes from the mean M. 

If the component starts operating at t = 0, the unreliability of the 
component for a period of operation to time T is 


T T 

Q(T)= / f(t)dt- / 

0 0 


1 

(W2x 


- (t- M) 
e 2cr 2 


2 

dt. 
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Since the normal function is defined from - » to + °° , the lower limit should 
be - . However, when the transformation of variables is made, the lower 

limit should be sufficiently small to indicate a negligible error when the 
evaluation is made using the standard normal tables. The component reliability 
function is 


- (t- M) 2 

R(T) = / T °° — i e 2cr2 dt 

a \[ 2tt 

In the above equations, the parameters M and cr actually represent 
sample estimates rather than the true population parameters. 

When the component reliabilities are computed, it is desirable to have 
the estimated parameters of the functions adjusted to a specified confidence 
level. In the normal case, the mean wearout life is adjusted to a lower level 
one-sided confidence limit. If y is the confidence level, the desired equation 
is 


A (T 

Pr(M - K ~=: 
a vn 


|M) = y = 0. 90 , 


A 

for example, where M is the estimated mean, 

K is the number of standard deviations from the mean and is a percentage point 
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on the abscissa of the standardized normal curve for a certain area under the 


curve, and the subscript 

a = 1 - y. 3 


The equation 

Pr(M-K a — -M) = y 


states that the probability is equal to y and that the true mean wearout life 
is greater than or equal to 

A <7 

(M - K —~= ). 

a VI r ' 


Thus 


A 

m t - m - k 

L a 


O' 

/ir- 


is the value used in the component reliability function for the mean wearout 
life. 

As an example, assume the following data were available for a component: 

A 

M = 1000 hours n = 36 

cr m s = 196 hours y = 0. 90 (confidence level). 


3 B. W. Lindgren and G. W. McElrath, Introduction to Probability and 
Statistics , The Macmillan Company, New York, N. Y. , 1959, pp. 165-167. 


41 


The mean wearout life adjusted to the lower limit would be 
M l = 1000 -K 0 . 10 -~“= 1000 - 1.28 


M = 967. 3 hours. 

Xj 

This would be the value used in the reliability function. 

With an operating time of 500 hours, the reliability would be computed 
as 

R(500) - / 5 00 f(t)dt 
Using the standard transformation, 

t - M 500 - 967.3 467,3 

or “ 196 “ 196 - _2 - 38 - 

The area under the curve corresponding to this value gives a reliability of 
R = 0. 9913. 


The Binomial Function 

The binomial function can be used to compute the reliability of a 
component when the component operation consists of a number of trials for a 
given period of operation. It is a discrete function and its failure frequency 
function is 


f(x) = 


ni 


xi (n - x) 


R X (1 - R) n X 


n = number of items tested or subjected to operation, 

R = probability of successful operation on any one trial , and 
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x = number of successful trials out of the total number n. 4 
The component reliability function is given by 




n - x 


x = s 


where the component must operate at least an s number of times. In this 
equation, n may very well be equal to s. In actual practice, R in the above 
equation represents an estimate which has been adjusted to a lower one-sided 
confidence limit. 

The lower one-sided confidence limit estimate is computed from the 
equation 


y R ( 1 - R ) = i - y , where 

x = s 

n = number of trials from which R is estimated , and 
R = reliability for the one-sided lower confidence limit. 

For a given confidence level, y, the equation can be solved for R^. This 


provides a 100 y percent confidence statement that the true reliability , R, is 
greater than or equal to the lower one-sided confidence limit R . This equation 
can be solved by trial and error or by the use of established tables. 5 


4 P. G. Hoel, Introduction to Mathematical Statistics , John Wiley & Sons, 
New York, N. Y. , 1962, pp. 86, 239. 

5 J. R. Cooke, M. T. Lee, and J. P. Vanderbeck, Binomial Reliability 
Table , U. S. Naval Ordnance Test Station, China Lake, Calif. , January 1964. 
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As an example, assume that a component had been subjected to 500 trials 
and was successful 499 times. For a given confidence level of y = 0. 90, the 
established tables give a lower one-sided confidence limit of R = 0. 99224. 

Ju 

This is the value used in the component reliability function. If the 
component had to operate successfully for one trial during a given period of 

operation, its reliability would be computed as 

1 o 

R(i) = Yj 77^7 (0. 99224) *(1 - 0.99224)° 
x = i 

R( 1) = 0. 99224. 

The Exponential Function 

The exponential function is used as an approximating function to compute 
the reliability of a component when the component is subjected to failures that 
occur at random intervals. The failure frequency function for the exponential 
function is 

f(t) = Xe , where 
t = operating time period, and 

X = average failure rate ( assumed to be a constant) . 

If the component starts operating at t = 0, the unreliability of the 
component for a period of operation to time t is 

Q(t) = / Q t f(t)dt= / Q t Xe " Xt dt 

Q(t)= 1 - e " Xt . 
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The reliability of the component is 


R(t) = f t °° f(t)dt = J t °° \e Xt dt 


R(t) = e Xt . 

The reliability function for the exponential situation can be derived as a 
special case of the generalized Poisson Law 

P (t)= -^-e _Xt , 
n n! ’ 

where P q ( t) is the probability of exactly n failures during the time interval 
0 to t. 6 For a given component, the probability of having zero failures for that 
particular component is 

R(t) = P Q (t) = e " Xt - e~ Xt 


R(t) = e Xt . 

The lower one-sided confidence limit for the exponential case is taken 
care of by adjusting the mean-time-between failure parameter. The mean- 
time-between failure, denoted by m, is given as the reciprocal of the failure 

A 

1 in 

rate, or m = — ' It has been shown that the ratio 2r is a random 

X m 

variable which is distributed as chi-square (x 2 ) with 2r degrees of freedom 


6 I. S. Sokolnikoff and R. M. Redheffer, Mathematics of Physics and 
Modern Engineering , McGraw-Hill Book Co. , Inc. , New York, N. Y. , 
pp. 654-657. 
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where r is the number of failures. 7 The estimate m is obtained by dividing 
the total test time (T) by the number of failures. The symbol m represents 
the true population parameter. The confidence limit equation is 


< v2 

m o;;2r 


= 1 - a = y . 


This equation states that there is a probability of y that the value of the ratio 

A 

2rrtl - will be less than or equal to the indicated chi-square percentage point, 
m 

By rearrangement, the equation may be written as 


<m) = i - a = y. 


'a ;2r 


Thus the lower one-sided confidence limit is 

A 

_ 2rm 

C L~ v2 

X a ;2r 

The probability is y that the true m will be greater than or equal to this value. 
It is this value that is used in the component reliability function. 

As an example, suppose that from actual component operating experience 

an estimate m were determined to be 

a T 20,000, 

m = — = hours, where 

r 1 

r = 1 , the number of failures , and 
T = total test time, 20,000 hours. 

For a 90 percent confidence level (y) , the lower one-sided confidence limit is 


2rm 

L' X 2 

X a ;2r 


0. 1 0 ;2 


40, 000 
4.605 


7 B. Epstein and M. Sobel, "Life Testing, " American Statistical 
Association Journal, Sept. 1953, pp. 486-502. 
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= 8, 700 hours. 

Using this value and a one-hour operating time, the component relia- 
bility equation gives 


" Xt ] 

R(t) = e = e 

- 0.000115 

R(l) = e 

R( 1) = 0. 999885. 


The Weibull Function 

The Weibull function is a function which has the capability of theoretically 
describing many different shapes of failure rate functions. The failure fre- 
quency function for the Weibull function is 

f(t) =aXt a e , where 

a > 0, X > 0, 

X = scale parameter, and 
a = shape parameter. 8 

If a component has a Weibull failure frequency function, the unreliability 
of the component for a period of operation from t = 0 to time t is 

Q(t) = f* f(t)dt 
- Xt^ 

Q(t) = 1 - e 


®D. K. Lloyd, and M. Lipow, Reliability: Management Methods, and 
Mathematics , Prentice-Hall, Inc. , Englewood Cliffs, New Jersey, 1962, 
pp. 137-138. 
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The reliability of the component for the same operating period would be 


R(t) = e Xt 

When the shape parameter, a, is equal to one, the exponential function 
is a special case of the Weibull function. If a = 1 is substituted into the 
component reliability function, the result is R(t) = e X *. This is the same 
equation obtained in the previous section for the exponential function. 


Selection of a Function 

When a theoretical probability function is being considered as a model 
for the actual probability function, the model should be tested to see how well 
it fits the actual situation. If sufficient data are available to formulate an 
empirical frequency function, one test that can be used is the chi-square 
goodness-of-fit test to see how well an assumed theoretical function matches 
the actual situation. If sufficient data are not available , the function must be 
selected by using judgement based on past experience and a logical rationale. 

The chi-square goodness-of-fit test is performed by evaluating the 
function 


X 


2 



( 0 - Ej) 2 


E. 

J 


where 


Oj = observed frequencies , 

Ej = expected or theoretical frequencies , 

X 2 -, = critical value, 

d, a ’ 

d = k-l-h = degrees of freedom , 
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k = number of class intervals, 


h = number of population parameters estimated to determine expected 
frequencies, and 

a = level of significance for the test. 9 

The test is performed by stating a hypothesis that the data come from some 
theoretical function. If the calculated value of the chi-square is greater than 
the critical value, the hypothesis is rejected. If the calculated value is less 
than or equal to the critical value, the hypothesis is not rejected. The latter 
means that the theoretical function can be used as an approximation to the 
actual situation. 

As an example of how data inputs to determine models are analyzed to 
establish a reliability function for a component, assume that the data listed 
below have been collected on a particular component. The data presented 
represent the time in hours at which a component failed when it started 
operating at t = 0. 

Time of failure in hours 


500 

4400 

750 

4800 

900 

5000 

1000 

5400 


R. Spiegel, Theory and Problems of Statistics , Schaum 
Publishing Co. , New York, N. Y. , 1961 pp. 201-202. 


49 





Time of failure in hours 


1500 

5600 

1700 

6600 

1750 

7700 

2200 

8300 

2600 

8700 

2900 

9700 

3000 

10500 

3500 

11600 

3700 

11800 

3900 

12500 

4000 

13500 


Total = 150,000 hours 

If these data are grouped into convenient time intervals and the frequency 

of failures is plotted against the time intervals , this will provide a rough idea of 


the form of the failure frequency function. If an equal time interval of 1000 
hours is selected and the data plotted on this basis, the form will indicate that 
a theoretical exponential frequency function might be a good model or relia- 
bility function for this component. The chi-square goodness-of-fit test will 
be applied to this data to see how well the theoretical function fits the actual 
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situation. When this test is used in actual practice, a much larger sample is 
desirable; however, this sample will be sufficient for the purposes of illustra- 
tion. 

The hypothesis here is that the data came from an exponential population. 
The level of significance (a) is selected as a = 0. 20. This is the probability 
of rejecting the hypothesis when it is actually true. Before applying the 
chi-square test, it is necessary to determine the expected or theoretical 
values for the chosen class intervals. To do this, it is necessary to determine 
the parameters of the theoretical function which is the exponential in this case. 
The exponential failure frequency function is given as 

f(t) = \e " Xt . 

The only parameter in this function is lambda (A.) , and it is determined by 

A = _n 

n , where 

Z ‘i 

i = 1 

n = sample size or the number of components that have failed, and 

th 

t. = time of failure for the i component. 

The next step is to set the k class intervals and to determine the 
theoretical relative frequencies for each class interval. The theoretical or 
expected absolute frequencies for each class interval is then determined by 
multiplying the theoretical relative frequency of each class interval by the 
value of n. The relative frequency for a particular class interval can be 
determined by setting an upper limit for that class interval, determining the 
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cumulative probability for that upper limit, and subtracting the cumulative 
probability to the upper limit of the next lower class. The results of applying 


this procedure are shown in Table I. 

Table I. Determination of Data for Applying Chi-Square Test 


lass 

j 

Upper limit 
of class 
interval 

Theoretical 

Cumulative 

Probability 

Theoretical 

Relative 

Frequency 

Theoretical 

Absolute 

Frequency 

i 

500 

. 10 

. 10 

3. 0 

2 

1000 

. 18 

. 08 

2.4 

3 

1500 

.26 

. 08 

2. 4 

4 

2000 

. 33 

. 07 

2. 1 

5 

2500 

. 39 

. 06 

1. 8 

6 

3000 

. 45 

. 06 

1. 8 

7 

3500 

. 50 

. 05 

1. 5 

8 

4000 

. 55 

. 05 

1. 5 

9 

4500 

. 59 

. 04 

1. 2 

10 

5000 

. 63 

. 04 

1. 2 

11 

5500 

. 67 

. 04 

1. 2 

12 

6000 

. 70 

. 03 

. 9 

13 

6500 

. 73 

. 03 

. 9 

14 

7000 

. 75 

. 02 

. 6 

15 

7500 

. 78 

. 03 

. 9 

16 

8000 

. 80 

. 02 

. 6 

17 

8500 

. 82 

. 02 

. 6 




Table I. — Continued 


1 

Class 

3 

Upper limit 
of class 
interval 

Theoretical 

Cumulative 

Probability 

Theoretical 

Relative 

Frequency 

Theoretical 

Absolute 

Frequency 

18 

9000 

. 83 

. 01 

. 3 

19 

9500 

. 85 

. 02 

. 6 

20 

10000 

. 86 

. 01 

. 3 

21 

11000 

. 89 

. 03 

. 9 

22 

12000 

.91 

. 02 

. 6 

23 

13000 

.93 

. 02 

. 6 

24 

14000 

. 94 

. 01 

. 3 

1 

25 

15000 

. 95 

. 01 

. 3 

26 

16000 

. 96 

. 01 

. 3 

27 

17000 

. 97 

.01 

. 3 

28 

20000 

. 98 

.01 

. 3 

29 

OO 

1. 00 

.02 

. 6 

j 


Since the theoretical or expected absolute frequency in each class should be 
equal to or greater than five, it is necessary to combine some of the classes to 
meet this condition. Combining certain classes gives the results shown in 
Table II. 
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Table II. Data for Applying Chi-Square Test 



Upper limit 

Theoretical 

Observed 

Class 

of Class 

Absolute 

Absolute 

j 

interval 

Frequency (E ) 

Frequency ( 0 ) 

1 

1000 

5. 4 

4 

2 

2500 

6. 3 

4 

3 

4500 

6. 0 

8 

4 

7500 

5. 7 

5 

5 

OO 

6. 6 

9 


The calculated value of chi-square is determined by 


k 

* 2 = Z 

i - 1 


(0. - E.) 2 

_J L_ 

E. 

J 


= (4 - 5. 4) 2 + (4 - 6. 3) 2 j_ (8 - 6. 0) 2 _u (5 - 5.7) 2 + (9-6. 6) 2 

5. 4 6. 3 6.0 5. 7 6. 6 


= 0. 363 + 0. 840 + 0. 667 + 0. 086 + 1. 105 
X 2 = 3. 061 

The critical value for chi-square is 

X 2 =X 2 =4.642 

Q* 0 3.0.20 

where the degrees of freedom are determined as 


d = k - l-h = 5- l- l = 3. 

The value of one is assigned to h since only one parameter was estimated 
from the data. 

Since the calculated value of chi-square is less than the critical value, 
the hypothesis that the data came from an exponential distribution is not 
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rejected. This indicates that it is reasonable to use the exponential function 
as the reliability function for the component on which the data were collected. 

Component Reliabilities for the Electrical Power System 

The component reliabilities for components in the electrical power system 
have been computed based on the data in a report on similar components 
operating in a similar environment. 10 Since the data provide mean-time- 
be tween failures (m) and failure rates (X), it is evident that the exponential 
function has been established as the reliability function for the components. 

Table III provides for each component in the system the appropriate name, 
the mean-time-between failures (m) in hours or cycles, the failure rate (X) 
in failures per hour, and the computed reliability. 

The component reliabilities have been computed based on an operating 
time of one hour. This is a reasonable time to use in view of the typical one- 
hour flights expected for a small twin-engine passenger plane. Components 
which are cycle sensitive are considered to cycle twice during a flight. The 
failure rate entered in Table in is appropriately adjusted for these items. 


10 J. J. Cyran, Electrical Power System Failure Rates , Engineering 
Report No. RE-103, Douglas Aircraft Co. , Long Beach, California 
(January 1966). 
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Table in. Component Data for Electrical Power System 



m 


(hours or 

Component 

cycles) 



Generator 

2 , 500 hours 

0. 000400 

0. 999600 

Generator 

Relay 

31, 544 cycles 

0. 000063 

0. 999937 

AC Cross 
Tie Relay 

18,318 cycles 

0. 000109 

0. 999900 

Any Bus 

500,000 hours 

0. 000002 

0. 999998 

AC Ground 
Service Tie 
Relay 

10,137 cycles 

0. 000197 

0. 999800 

Transformer 

Rectifier 

(T-R) 

215, 666 hours 

0. 000005 

0. 999995 

Reverse 

Current 

Relay 

250,000 hours 

0. 000004 

0. 999996 

DC Ground 
Service Tie 
Relay 

23,177 cycles 

0. 000086 

0. 999914 

DC Cross 
Tie Relay 

23, 177 cycles 

0. 000086 

0. 999914 
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CHAPTER V. FURTHER ANALYSIS OF COMPLEX SYSTEMS 


Introduction 

In Chapter in, it was pointed out that using the canonical expansion 
scheme to determine the system reliability equation becomes prohibitive 
when the system has a large number of components and the component proba- 
bilities of failure are not small. When this situation occurs, the sum of the 
numerical evaluations for the first few success terms does not provide a 
sufficiently good approximation. 

To illustrate this point, consider the system shown in Figure 5, 

Chapter ni. The expansion scheme for this system contains only 32 items. 

For the electrical power system, however, the complete expansion would 
require 4096 terms. Although identifying success terms in the expansion 
would be easy, obtaining the expansion itself would require a tremendous 
amount of labor. 

A Method for Determining the System Reliability Equation 

When conditions are such that the canonical expansion scheme is not 
very attractive, the system reliability equation can be obtained by defining 
pertinent events for the system. These events may be output events 
representing outputs from the terminal components of the system , or they may 
represent outputs from components internal to the system. 
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After these events are defined, equations are written expressing the 
probability of their occurrence. The probability of getting output events from 
internal components is written in terms of the preceding components. The 
probabilities of getting output events from terminal components are written 
in terms of the probability of occurrence of the outputs from internal compo- 
nents and in terms of the reliabilities of certain components as necessary. 

The primary reason for defining output events from certain internal components 
is to simplify writing the initial equation for the system reliability. After the 
above is accomplished, the system reliability equation is then written in terms 
of the probability of occurrence of the events defined in terms of outputs from 
terminal components. 

This method will be demonstrated first on the system shown in Figure 5, 
Chapter III. Success is achieved for this system if there is an output from 
component 4, or component 5, or both. The complete reliability function was 
derived for this system and is given in Chapter III. 

Let the following events be defined: 

Event A = output from component 4, and 
Event B = output from component 5. 

If an expression can be derived for the probability of occurrence of the 
events A and B, then the system reliability equation can be determined as 

R = Pr(A) + Pr(B) - Pr(A)Pr(B). 
s 
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The equations for the probability of occurrence of events A and B are given 
below: 

Pr(A) = [RjRsd - Ri) + Rj R 4 
Pr(B) = [R,R 3 (1 -R 2 ) +R 2 ] R s . 

The system reliability equation is then determined as 

R g = [R 2 R 3 < i - Ri) + Ri] R 4 + [RiR 3 ( 1 - R 2 ) + R^ R 5 

- { [R 2 R 3 ( 1 - Ri) + Ri] R 4 } { [RiR 3 ( 1 - Ra) + R 2 ] R 5 ) 

R = R2 R 3 R 4 - Ri R 2 R 3 R4 + r i r 4 + RiR 3 R5 - RiR 2 R 3 R5 + R 2 R 5 - RiR 2 R 3 2 R 4 R 5 
s 

+ RjRj^R^Rj - R 2 2 R 3 R 4 R 5 + R 1 2 R 2 R 3 2 R 4 R5 - Ri 2 R 2 a R 3 2 R 4 R 5 + R 4 R 2 2 R 3 R 4 R 5 

- Ri 2 R 3 R 4 R 5 + Ri 2 R 2 R 3 R 4 R 5 - RiR 2 R 4 R 5 . 

This equation can be simplified by using one of the fundamental laws from 
Boolean algebra. The law is 

x 2 = x . 1 

As related to the above equation, this can be interpreted as follows: the 
probability that a particular component works times the probability that same 
component works simultaneously is in reality just the probability that the 
component works. Thus, in the above equation, 

Rj 2 = Rj, R 2 2 = R 2 , etc. 

With this relationship, the equation can be written as 

R = R 2 R 3 R 4 - R 4 R 2 R 3 R 4 + RjR 4 + RjR 3 R 5 - R 4 R 2 R 3 R 3 + R 2 Rs - R 4 R 2 R 3 R 4 R 3 
s 

+ RiR 2 R 3 R 4 R 5 - R 2 R 3 R 4 R 5 + R 1 R 2 R 3 R 4 R 5 - RiR 2 R 3 R 4 R 5 + R 4 R 2 R 3 R 4 R 5 


1 C. I. Lewis, A Survey of Symbolic Logic , Dover Publications, Inc. , 

New York, N. Y. , 1960, p. 54. 
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-R 1 R 3 R 4 R 5 + R1R2R3R4R5 - RlR 2 R 4 R 5 * 

The equation can now be simplified and written as 

R = R1R4 + R2R5 + R1R3R5 + R2R3R4 “ R1R2R3R4 ~ R1R2R3R5 “ R1R2R4R5 
s 

- RjR3R4Rj - R2R3R4R5 + 2R4R2R3R4R5. 

This is the same equation that was obtained from the complete expansion in 
Chapter III and thus demonstrates the validity of this method. It should be 
pointed out that if two or more factors in an equation contain terms involving 
some components which are the same, and multiplication of these factors is 
indicated, then the multiplication must be performed and the resulting 
expression simplified by applying the fundamental Boolean law. 

Application of the Method to the Electrical Power System 

The method that has just been demonstrated in the previous section can 
now be applied to the electrical power system. 

Reference to Figure 6 , Chapter III, indicates that success is achieved 
for the electrical power system if there is an output from component 8 or 10 or 
both, and from component 11 or 12 or both. Let the following events be 
defined: 

Event E = output from component 4 , 

Event F = output from component 5 , 

Event AC = output from component 8 or 10 or both, and 
Event DC = output from component 11 , or 12 , or both. 


60 



An expression can be derived for the probability of occurrence of each 
of the above events. For the event E, the equation is 

R e = [R 2 R 3 (i-Ri)+Ri] R 4 
Rg = RiR 4 + R 2 R 3 R 4 - RiR 2 R 3 R 4 . 

For the event F, the equation is 

R f = fRiRsd - R 2 ) +R 2 ] R 5 
Rp = R 2 R 5 + RiR 3 R5 - RiR 2 R 3 R5- 

For the event AC , the equation is 

R AC = r e r 8 + RpRio - Rj^ReRpRio* 

For the event DC , the equation is 

R dc = RpReRn + RpR7 R i2 + RpReRgRc + RpRzRaRn - RpR^p^RgRn 

- R E R6 R F R 7R9Rl2 - R E R6RpR7RllRl2 “ R E R6 R 9RliRl2 - RpR7R9RilRl2 

+ 2 R e R 6 R f R 7 R 9 R 11 R 12 . 

The system reliability equation is then determined as 

R g = R ac r dc = RpReRsRii + R E RpR 7 R 8 R i 2 + R E R 6 R 8 R 9 Ri 2 + R E RpR 7 RsR 9 Rii 

- R^RpRgRYRgRgR^ - R^RpRgR^RgRgR^ - R^R^RgRyRgRjjR^ - RgRgRgRgRjjR^ 

- R E Rj r ,R 7 R 8 R 9 R 1I R 12 + 2R E R E R 6 R 7 R 8 R 9 R 11 R 12 + R^RpRgRjgRjj + R E R 7 R 10 R 12 

+ VpWioR* + RpR7 R 9RioRn - R E RpReR7R9RioRii - R E RpR6R7R9RioRi2 

- R^RpRgR^jgR^R^ - R^R^RgRgRjgRjjRjjj - R^R^gRjgRjjR^ 

+ 2R E R F R e R7R9RioRiiRi2 + ^e^f^ 7 ^ 8 ^ 9 ^ 10 ** 11 ^ 12 - 2Rj,Rp,R6R7R8R9RioRnRi2 

- RgRpReRsRioRii - R E RpR7 R 8RioRi2 ~ R E RpR6 R 8R9RioRi2 ~ R E Rp R 7R8R9RioRii 

+ R^RpRgR^^gRjgRu + Rj^RpRgR^gRgRjoR^ + R E R E RgR 7 R 8 Ri 0 RnRi 2 
+ R E R E RgR 8 RgR 10 R 11 R 12 . 
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It is more convenient to obtain a numerical estimate of the system 
reliability for a specific operating time by first computing the values for R 

L, 

R„ R^R . R e , and R 7 , and then substituting them into the above equation, 
r , k, f 

The expression for R^ was 

R e = R1R4 + R2R3R4 - RiR 2 R 3 R 4 - 

Substituting the component reliability functions with the appropriate parameters 

(established in Chapter IV) gives 
R = e — 465 X i0 _6t + e -574 X 10 -6t _ e ~1037 X 10" ^ 

E 

The expression for R p was 

Rp - R2R5 + R1R3R5 " RiR 2 R 3 R 5 * 

Making the appropriate substitutions gives 

R = g-465 X 10“ 6 t + e -574 X 10“ _ e ~1037 X 10" ^ 

F 

The expression for R R is 

kj F 

RpRp = R1R2R4R5 + R1R3R4R5 + R2R3R4R5 ~ 2R1R2R3R4R5. 

Making the appropriate substitutions gives 

r r = e -930 x 10 “ 6t + 2e“ 576 x 10- 6t -2e -1039 x 10 ” 6t 
E F 

The logic component number six is made up of two parallel branches as 
can be seen from Figure 4, Chapter III. Let branch "a" denote the branch 
consisting of the AC ground service tie relay, ground AC bus, right trans- 
former-rectifier No. 2, reverse current relay, and DC ground service tie 
relay. Let branch "b" denote the branch consisting of the right transformer- 
rectifier No. 1 and a reverse current relay. The expression for R e can then 
be written as 
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Rg — R + R - R R » 
a b a b 

The appropriate substitution gives 

R g = e -294 X 10- e t + e -9 X lO -6 * _ e -303 X NT®* 

For the logic component number seven, branches "c" and "d" can be 
defined in a similar manner. The expression for Kj can then be written as 

' c d c d 

The appropriate substitution gives 

R 7 = 2e" 9 x 10-6t - e -18 x 10_6t . 

In the system reliability equation, those portions of the terms which 
consist of combinations of the components 8 through 12 can be combined 
readily by summing their exponents. After this is accomplished, the system 
reliability equation would be 

R g = R E R 6 e- 4 X ^ + R E R F R 7 e" 4 x R^ge" 90 x i0 ~ h + R R^R 7 e- 90 x 10 " 6t 

- 4R E R F R e R 7 e- 90 x ^ - 2R E R F R 6 R 7 e" 6 x - R^ge" 92 x ^ 

- R E R F R 7 e -92 x 10 " 6t + R E R F R e e- 4 x I0 " 6t + R p R 7 e- 4 x i0 ~ H + R^Rge - " x i0 ~ h 
+ R-Rre- 90 x i0 ~ h - R^R R 6 e -92 x R R ^' 92 x 10 “ 6t - R R R e e -6 x i0 ~ H 

x 1 L Jr r E F 

- R E R p B,e-» * >»-‘ t - R E R F R,e-“ x ‘"' !t - Rj-R^e' 92 x “ r ‘ t 

+ 6R E R F R 8 R,e- il! x « r ‘ t + R^R^e' 8 x ‘""‘‘h- R^R^" 81 * ‘»' 6 * 

+ R E R F R,e- s ‘ x lrh - 2R E R F R 6 R,e- M x irH 
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CHAPTER VI. IMPLEMENTING, CONTROLLING, 

AND TESTING THE SOLUTION 

Implementation and Controls for the Solution 

As discussed in Chapter I, the major problem confronting engineering 
management is that of selecting a particular design from several proposed 
design concepts based on established criteria. The criteria for selection 
might be based on such elements as cost, weight, performance, and reliability. 

After one concept is selected, implementation takes place which consists 
of the complete development of the chosen design. This will determine whether 
or not the design concept is valid from a functional standpoint and if the design 
meets the established criteria. 

Controls for the solution consist of maintaining a record as to how well 
the design is meeting the established criteria throughout its development. 

From the standpoint of reliability, if the initial design configuration is changed, 
the reliability must be estimated again to determine the effect of the change. 

If the reliability estimate decreases significantly, engineering management 
should be made aware of the decrease and the designers may be asked to 
attempt to improve the design. 
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Testing the Solution 


Except in unusual cases, the reliability of a system cannot be estimated 
from testing until the system has been put into actual operation. Even then, 
for complex systems , it may not be possible to get an estimate of the system 
reliability until the system has been operated for many thousands of hours. 

When the latter occurs, it is possible in a much shorter time to obtain 
reliability estimates of at least some of the components that make up the 
system. These component reliability estimates, based on actual operating 
experience, can then be used in the system reliability equation to obtain an 
estimate of the system reliability. These updated evaluations can then be 
compared with the initial predictions. 
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CHAPTER VH. CONCLUSIONS AND RECOMMENDATIONS 


Conclusions 

As proposed in Chapter I, this study has been confined to a subproblem of 
a major problem. The major problem was viewed as that of selecting one 
particular design from several proposed design concepts based on established 
criteria. The subproblem as treated here was that of estimating the reliability 
of the proposed concepts, with particular emphasis on complex systems. 

In Chapter II, the analysis of simple systems was discussed. When a 
system is studied for a reliability analysis, a reliability logic diagram is 
constructed that shows the reliability relationship of the components that 
make up the system. When this diagram resulted in a simple series, parallel, 
or series-parallel configuration, the system was viewed as a simple system. 
The system reliability equation for such a system can be written by a relatively 
easy application of the fundamental probability theorems. 

When the reliability logic diagram did not result in one of the above 
mentioned configurations, the system was viewed as a complex system. In 
Chapter III, a canonical expansion scheme technique was used to estimate the 
reliability of a complex system when the system has a relatively small number of 
components or the component probabilities of failure are small. At this point, 
the reliability functions for the components that make up a system were 
discussed in Chapter IV. 
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If the number of components in a system is rather large and the compo- 
nent probabilities of failure are not small, the expansion technique becomes 
too cumbersome as the number of terms involved grows considerably. When 
this situation arises , a method can be used which was developed in Chapter V 
to obtain the complete system reliability equation. This method was seen to 
depend primarily on defining pertinent output events for the system. 

Finally, a limited discussion was provided in Chapter VI on implementing, 
controlling, and testing the solution in regard to reliability. 

Recommendations 

When a system is determined to be complex and the number of components 
is small or the component probabilities of failure are small, the canonical 
expansion method is recommended for use as it will provide the system relia- 
bility estimate fairly quickly. If, however, the number of components is large 
and the component probabilities of failure are not small, it is recommended 
that the method developed in Chapter V be used. 

When the components that make up a system are similar to components 
that have operational experience in environments similar to those expected, 
then sufficient data are usually available to obtain reliability estimates for 
the components. If a component is of a research and development nature, 
however, sufficient data are not usually available from testing to obtain a 
reasonable reliability estimate. The optimum method of testing would be to 
simulate simultaneously as many of the expected environments as possible. 
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Since this is usually too expensive, a study should be made on how reliability 
tests can be conducted on components without the simultaneous simulation of 
the expected environments over a long period of time. 
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